Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eh9KimT_SuwGdA6M1hM-D_ZREQc.roa
File: eh9KimT_SuwGdA6M1hM-D_ZREQc.roa (raw, json)
Hash identifier: 8YLkxUZVgLctyOPzZQGy0DbaBZlKZpMMFu3t2JQA5Mo=
Subject key identifier: 7A:1F:4A:8A:64:FF:4A:EC:06:74:0E:8C:D6:13:3E:0F:F6:51:11:07
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F30B501882F16ED113EC5DB49EC40A0C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eh9KimT_SuwGdA6M1hM-D_ZREQc.roa
Signing time: Wed 30 Sep 2026 15:59:59 +0000
ROA not before: Wed 30 Sep 2026 15:59:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197246
IP address blocks: 103.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0b:50:18:82:f1:6e:d1:13:ec:5d:b4:9e:c4:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 15:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1f4a8a64ff4aec06740e8cd6133e0ff6511107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:c5:d8:4c:3e:ec:4a:ed:cd:f7:d1:e8:05:
2a:55:e1:5c:c8:0d:55:4c:88:58:ce:c2:77:2e:65:
89:d9:ac:fd:80:f1:1e:bb:2a:ad:d4:fd:1a:5e:82:
33:39:c0:ce:f3:0f:54:e5:40:da:65:71:30:f6:47:
23:aa:fd:9f:b7:42:b9:cc:a3:ab:68:15:0c:21:ea:
12:58:3d:37:f2:f8:3b:05:b0:9b:ca:4a:78:2e:72:
7c:93:a1:af:a9:8d:ae:1e:3d:11:32:42:7b:bd:2d:
9c:4b:26:a0:ee:92:57:2d:bc:0b:54:a2:d2:14:81:
6f:a9:2c:82:f1:85:b1:83:f5:51:f6:79:3f:2f:56:
b9:cd:bf:22:1b:cf:f5:71:db:d0:f9:4d:7d:49:6c:
7f:ba:a3:d3:ab:85:e9:49:ea:54:e5:55:84:23:23:
5a:0f:51:cf:48:cb:78:15:30:f6:a9:83:8c:79:f9:
51:81:22:fe:69:68:4a:50:02:83:b8:ea:ee:db:ca:
42:74:00:d6:b2:a9:d1:67:2e:da:d3:b6:55:a4:94:
7b:b5:d7:9d:80:93:c3:6d:1f:fc:8b:52:92:fc:80:
b9:c2:04:7b:c1:fa:52:35:89:37:aa:a3:9f:b8:79:
ec:fd:12:56:d9:11:75:7b:24:d4:85:05:be:11:4e:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:4A:8A:64:FF:4A:EC:06:74:0E:8C:D6:13:3E:0F:F6:51:11:07
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eh9KimT_SuwGdA6M1hM-D_ZREQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
25:79:97:f6:92:3b:18:fe:d7:c8:58:85:cb:7b:be:cc:e3:e0:
a3:7a:55:c0:4f:4d:14:3a:65:ac:4e:25:92:79:3c:35:9a:d7:
39:28:04:6d:b2:97:bc:23:43:07:93:b5:03:a9:7b:65:d8:32:
07:2f:c7:8b:82:a4:cb:14:1f:59:e8:2b:96:67:06:05:4a:f6:
92:0d:e0:63:7b:06:e1:18:38:48:d6:10:9e:74:9c:f9:aa:f0:
94:9e:65:9b:ad:2a:32:33:c5:e7:c3:c2:5d:c9:4a:65:56:da:
85:76:9c:66:3a:0d:b9:95:cc:f5:cb:4e:0f:fb:1f:7d:c7:99:
b7:62:27:e6:93:fd:d0:65:6f:64:c0:0e:a2:fc:f5:36:3a:a1:
71:8f:d0:d1:7a:8b:48:97:3e:10:55:43:e9:d6:ed:4e:74:1b:
00:cd:c6:83:fd:ee:3e:d9:87:0a:68:80:69:1b:28:17:fb:20:
23:34:65:99:36:65:ab:1e:52:f3:17:59:d5:83:35:5a:06:75:
c9:f9:1e:cb:c9:62:f6:b8:f9:e1:35:9f:46:ba:0a:2f:77:43:
26:88:bf:a0:fb:b0:bf:ea:3d:63:c4:50:38:2b:02:5e:97:ce:
01:2a:3b:49:54:ac:4f:99:6a:b1:33:60:b3:38:0f:92:90:af:
25:fd:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:44 2026 by rpki-client